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Around 4,000 websites were affected by the recent hacking of a software used by several 
government-owned websites, including those in the U.K. The culprit? A crypto mining 
code inserted in Browsealoud, a plugin that gives support to speech, reading, and 
translation. 

On Feb. 11, Sunday, hackers secretly inserted a Coinhive miner code intended to extract 
Monero digital currencies by using the central processing unit (CPU) of a site visitor’s 
device or machine. 

In itself, cyrptomining is not a bad thing, but the process requires extreme computing 
power that most of the times, it could use 100 percent of an ordinary laptop or device’s CPU 
resources. Unless you have a powerful hardware to mine cryptocurrencies, digital mining 
could not only decrease your device’s speed and performance, but could also damage the 
hardware. 


Advertisement 

Sunday’s breach on Browsealoud was first spotted by information security consultant Scott 
Helme, who found the CoinHive Miner’s code hiding underneath the plugin’s Javascript 
file, which was used and hosted by several Australian and U.K. government websites. The 
hacker only attacked a single product to affect a thousand, he said. 

Helme also said hackers changed Browsealoud’s code and inserted a “CoinHive crypto 
miner to any page it was loaded into.” 

“This is a pretty bad situation to be in and any site that loads that file will now have the 
crypto miner installed. The sheer number of sites affected by this is huge and some of them 
are really prominent government websites!” he added. 

Texthelp acknowledged the breach and temporarily took down their website. The 
government websites also temporarily shutoff their services. All later returned after a fix 
was released. 


Texthelp said the attacker added the code to the file “to use the browser CPU in an attempt 
to illegally generate cryptocurrency.” Fortunately, the action was quick and the exploit 
lasted only four hours. 


There were no attempts to extort or ransom money from them, Texthelp said. And what 
was more assuring was that no customer data were accessed or lost. 



“Texthelp can report that this attacker did not attempt to extort or ransom money from 
Texthelp or Texthelp customers. The company has examined the affected file thoroughly 
and can confirm that no customer data has been accessed or lost. The file used the 
computer’s CPUs to attempt to generate crypto currency. The exploit was active for a 
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This is the latest incident of crypto mining involving Monero, which was banned, although 
not completely, by Malwarebytes last year in October for shady execution. 

“We do not claim that CoinHive is malicious, or even necessarily a bad idea. The concept of 
allowing folks to opt-in for an alternative to advertising, which has been plagued by 
everything from fake news to malvertising, is a noble one. The execution of it is another 
story,” Malwarebytes said in a post. 
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Martin is a licensed Math Teacher, earning his degree in 2009. His writing career 
began when he worked for a New York-based online publication as a tech 
journalist. He then became an Editor for an International Business Times subsidiary 
and was promoted to Managing Editor in six months. He loves to do long drives on 
weekends due to its soothing effect on his entire being :D. Address: Kalibo, Aklan 11 
Email: martins@technochops.com 
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